You are a SaaS provider deploying dedicated blogging software to customers in your Google Kubernetes Engine (GKE) cluster. You want to configure a secure multi-tenant platform to ensure that each customer has access to only their own blog and can't affect the workloads of other customers. What should you do?

A. Enable Application-layer Secrets on the GKE cluster to protect the cluster. B. Deploy a namespace per tenant and use Network Policies in each blog deployment. C. Use GKE Audit Logging to identify malicious containers and delete them on discovery. D. Build a custom image of the blogging software and use Binary Authorization to prevent untrusted image deployments.